Privacy notice

Who we are

ScienceShot, Rue de la Dole 02, 1203 Geneva, Switzerland, publishes dccomply.com under the name DC Comply and is responsible for your data (the controller). ScienceShot is a Swiss company: our data protection law is the Swiss Federal Act on Data Protection (FADP), and we also apply the GDPR where it covers readers in the EU and the UK. We have not appointed a representative in the EU. Contact: [email protected].

This notice covers dccomply.com only. The pages it links to on scienceshot.com, such as the compliance tracker, follow the ScienceShot privacy policy.

Cloudflare

Every request to dccomply.com passes through Cloudflare, which protects the site against attacks and delivers its pages. To do that Cloudflare handles your IP address, your browser's user agent and the address you asked for, and keeps security records, such as requests it blocked, under its own privacy policy. If Cloudflare challenges a request it believes is automated, it may set a cookie of its own, such as cf_clearance, to remember that the challenge passed. We rely on our legitimate interest in keeping a public site safe and available.

Our server

The site runs on a server we rent from Hetzner in Nuremberg, Germany. It writes no access log, so your IP address and the pages you read are not stored there. The server keeps a system journal of service events and errors, such as a restart or a page that failed, without visitor addresses, and older entries are overwritten as the journal fills. Our database holds nothing about visitors today. We keep encrypted nightly copies of it for fourteen days on the server and a copy off the server for recovery.

Cookies

dcc_theme remembers whether you chose the light or the dark theme. It is set only when you press the theme button at the foot of a page, holds the word light or dark and lasts a year.

ss_noga is set only if you open a dccomply.com address ending in ?ss_noga=1. It tells the site to load no analytics in that browser for a year, and ?ss_noga=0 removes it. We use it to keep our own visits out of the figures, and you can use it the same way.

Both cookies record a choice you made and are used for nothing else. We set no other cookie today, and the site shows no advertising.

Analytics

DC Comply will use Google Analytics 4 in a property of its own, not shared with scienceshot.com or any other site. It is not switched on yet: today no page loads any Google script. Analytics loads only after we enable it, and we will update this page and its date before that happens.

Once it is on, visitors in the EU, the EEA, the UK and Switzerland send Google only measurements without cookies, which do not identify your browser. We show no consent banner, so no analytics cookie is set for them. Elsewhere Google Analytics sets its own cookies on dccomply.com (_ga and _ga_ followed by the property id, kept for two years) to recognise a returning browser. Google Analytics 4 does not log or store IP addresses: Google uses the address to work out an approximate location and then discards it. Google signals and advertising features stay off, and the data is linked to no advertising account. We read only aggregated reports, such as which pages are read and where visits come from, and keep the data for two months, the shortest period Google offers. We rely on our legitimate interest in knowing which pages are useful.

Accounts

Accounts are not open yet. The sign-in and sign-up pages carry no form and refuse any post sent to them, so no sign-in cookie is ever set. Before the first account can be created, this notice will say what accounts keep.

Writing to us

When you write to us, we keep your message and your address so we can answer you, and delete them when you ask. We rely on our legitimate interest in answering you.

Sharing

We share data only with the services named here: Cloudflare, Hetzner and, once analytics is on, Google. Google also holds our mailbox, so it sees what you write to us. Cloudflare and Google may process data outside Switzerland and the EU under the EU standard contractual clauses and the Swiss and EU data privacy frameworks. We never sell personal data.

Your rights

You can ask to see, correct, delete or restrict the use of your data, receive a copy of it, or object to processing based on our legitimate interest, by writing to [email protected]. You can also contact the Swiss Federal Data Protection and Information Commissioner or your local data protection authority.

Changes

If this notice changes, we update this page and its date.